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(71) We, GRETAG AKTIEN- 
GESELLSCHAFT, a company organized 
under the laws of the Confederation 
of Switzerland, of Regensdorf, Switzerland, 

5 do hereby declare the invention for which 
we pray that a patent may be granted 
to us, and the method by which it is to be 
performed, to be particularly described in 
and by the following statement: — 

10 This invention relates to apparatus for 
preparing and evaluating mechanically 
readable payment documents such as 
cheques. 

Present-day systems of payment use bank 
15 or postal cheques. As a general rule, the 
genuineness of said documents is assessed 
by the signature of the person drawing the 
cheque. Similarly, the validity of a receipt 
given a person making a payment is 
20 determined by a signature which is normally 
the signature of a bank counter clerk. 

Since signatures are relatively easy to 
counterfeit it is, in practice, very difficult to 
fully automate cheque payment systems 
25 because of the complex and expensive 
equipment needed to check the 
genuineness of signatures. 

It is an object of the invention to obviate 
these disadvantages by providing apparatus 
30 for preparing and evaluating documents by 
coding other information nornially printed 
on such documents which can then be used 
to check the genuineness of the documents. 
In accordance with this invention 
35 therefore we provide apparatus for 
preparing and assessing documents, 
comprising; at least one document- 
preparing apparatus including first means 
for positioning a payment document, means 
40 for writing on the positioned document, 
means for producing a serial number, first 
means for enciphering, first means for 
introducing an amount and the serial 
number into the means for enciphering; the 
45 first enciphering means comprising an 
electronic code calculator and a first secret 



code store and producing a crypto number 
from secret code information from the 
store, the serial number and the amount, 
the output from the first enciphering means 50 
and the first means for introducing the 
amount and the means for producing the 
serial number controlling tne means for 
writing in order to write the amount, the 
serial number and the crypto number 55 
on the positioned document; and further 
comprising: at least one document-assessing 
apparatus including second means for 
positioning a payment document, means for 
reading from the positioned document the 60 
amount, the serial number and the crypto 
number, a second enciphering means 
comprising an electronic code calculator 
and a second secret code store storing the 
same secret code information as that stored 65 
in the first store for producing a crypto 
number from the secret code information 
stored in the second store, and the amount 
and the serial number read by said reading 
means, means for comparing the crypto 70 
number produced by said second 
enciphering means and the. crypto number 
read by said reading means, and means 
responsive to said comparing means to 
indicate the genuineness of the document. 75 

In a preferred form of this invention a 
payment document such as a cheque has 
associated with it a specific item of 
information which is different for each 
payment document and which is referred to 80 
herein as . a serial number. The serial 
number and the amount of the payment 
document are enciphered with secret code 
data, the result of tne enciphering, referred 
to herein as the crypto number, is applied in 85 
mechanically readable form to the payment 
document together with the amount and the 
serial number. To check the genuineness of 
the document so prepared its crypto 
number, amount and serial number are read 90 
mechanically and the amount and the serial 
number are enciphered with an identical 



secret code data as that used in preparing 
the document. The crypto number yielded 
with 'thf enciphering is co^red 

with the crypto number read froni the 

fSle lTt?rf"'"'="' t"'^ '^'^ '^«er7s the 
same as the former the payment document 
IS assessed as valid. "'"cnt 
Since the crypto number depends upon 

10 inH ^V-'^^ ""P''^'- secret cSde 

10 and IS unambiguously defined by these 
three items of information, the 
mathematical relationship between the 
amount, the serial number and the crypto 
15 theTe i^e^?"?* ''/ discovered unless'^all 
Secret S ^"formation, including the 
secret code, are known. 

The serial number of the payment 
be s^re? evaluated is read and may 

on ^t, stored the serial number of each 
20 payment document to be evaluated then 
^°"}Pared with all the stored serial 

with anv ^fM^^ ^"""i °^ non-coincidence 
with any of the stored serial numbers the 
f ""'"ber of the document to hi 
25, evaluated is stored and the payment 
document IS assessed as valid if the read 

nr^,wL""i™''®'' ^ ^Sree with any of the 
previously stored numbers. 

r. ^n?. advantage of this method is that it 
30 provides complete security agains 

drawn a document for a particular amount 
may reahse that such amount and the seria 
atTh.V""-f'' °" payment document 
SvDto m?ml "^^^ prepared produces the 
crypto number also printed on the 
document at the same time. He could 
duplicate the previous document 
40 oSe E ^^I^^ionship between, on the 
40 one hand, the amount and serial number 
coie".? °Jher hand, the crypto number is 
nff^fif • ^"Pl'cate could not be detected 
tL\ ^ However, a serial number check 
excludes this possible form of fraud since 
45 the evaluation or assessment of the paymem 

m^^r^l! r°,"'d disclose that the seria 
number had already been used once 
PT/^rTD^c'^.°^"P^ny^ng drawings:— 
^ of i ^ ^ schematic diagram 

alo^cialXrJS^""^ apparatus\nd 
of ^ * schematic diagram 

nf ?*^^^r^ ^ ^ '''°ek schematic diagram 
Rsur^ 1 fnf'^" apparatus sho>fn S 

Prrr rPB associateci document, and 
of 1- " ^ b'o^l' schematic diagram 
p1y?/«'orcS^^"^°'"^^'-"yP«y-«'- 



60 paying out cash 

ass^;?^'''^ '° ^'^"""^ l. a document- 
enctnh..^ apparatus A comprises an 

Seer 2^ . 7'?^ ^- 
AC Prot^ucer 2, a data write-m stage 3 and a 

65 document print-out device 4. DocumeS? B 



has three information panels 5 to 7 for 
receiving data relevant to the document- 
feria number" ^"^^nt, panel 6 the 

sec^r^f cnniP^?'"^ J comprises a 

sccre code store 8 and a code oulse 

outnut^'^[,^r^r"« three inputs andTne 
nmSl r '"P"* connected to the 
output of store 8, its second input is 
connected to the output of stage 3 Td its ^ 
third input is connected to the serial 

S-out'dev?ce 4'" ^° 

. Preferably, the stage 3 comprises a 

is'S serial number p^SJucer 2 

Lre of ?heT-'/°""i"- "^^^ "ni^^ § and 9 
are of the kind used in the information- 

Preferably, the device 4 is a printinc 
mechanism which prints opSif on 

cou!d he!, ""'""^^^ ^^'^ documem ^ 
could be a magnetic head for writing data 

encnH^H f'^°''"'"^"^ ^^e appropriately 
encoded form on a magnet track or it could 
be a perforator punching the data in an 
appropriate encoded form in the document 
follows:-!?^"'"'"' '^""••'^d °P"ates as 
A client wishing to prepare a document 

unn?f,f;:?^ 'V introduced an 100 

unpnnted document form into the 

apparatus by sliding it in through a s ot The 

2 produces a serial number which the 
mechanism 4 prints in panel 6 of the 110 
documem and which is applied to the third 
input of calculator 9. Present at the firsi 
input of the calculator 9 is the secret code 
information from the store 8 sJch 
n±Tf"°o" enciphered in the 115 

re^re ?°t^nl''l? ""^'^ information items ^ 
representing the amount and the serial 
number. This enciphering leads to the 
crypto number being obtainable a^ the 
output of the calculato" 9. The mechanism 5 , 20 
prints the crypto number in the panel 7 tb 
'"'Sf^e 'the' P/^P^^^^'°n of the d'ocumint 
Mncc the crypto number is dependent 
upon, and unambiguously defined bv the 

to^rV)! S "r"" -n^rhe'r^cm 125 
coae, It is impossible to discover the 
rnathematical relationship between these 

unless all of them are known. However 
smce the secret code is by hyp°oTe"s 130 
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secret, it is virtually impossible so to falsify 
the amount and/or serial number and/or 
crypto number to achieve the correct 
relationship determined by the secret code 
5 between, on the one hand, the amount and 
the serial number and, on the other hand, 
the crypto number. 

Referring to Figure 2, a document- 
evaluating device C comprises an 

10 enciphering device 1 having a secret code 
store 8, the same as store 8 in apparatus A, 
and a code pulse calculator also the same as 
calculator 9 in the apparatus A. The device 
C also comprises a document reader 10, a 

15 crypto number comparator 11, a serial 
number testing and storing stage 12 and an 
AND gate 13. 

The document reader 10 has means (not 
shown) for receiving the document, such as 

20 a sliding drawer which aligns the panels 5 to 
7 of the document B inserted into the 
drawer in the sensing zone of the document 
reader 10. As illustrated, the reader 10 has 
three outputs; the information contained in 

25 panel 5 — i.e. the amount — is conveyed via 
the first output to the second input of the 
calculator 9, the information in panel 6, i.e. 
the serial number — is conveyed via the 
second output to the third input of 

30 calculator 9 and to the input of stage 12, and 
the information in panel 7, i.e. the crypto 
number — is conveyed via the third output 
to one input of comparator 11. The other 
input of comparator 1 1 is connected to the 

35 output of calculator 9. The output of stage 
12 and the output of comparator 11 are 
each connected to one input of AND gate 

Whe n a document is introduced into the 

40 apparatus, the reader 10 reads the three 
panels 5 to 7. The crypto number 
information is obtained from the amount 
and serial number data items in the 
calculator 9 in a manner similar to that in 

45 the document-preparing apparatus A of 
Figure 1. Comparator 11 compares the 
crypto number information obtained in 
calculator 9 with the crypto number read 
from panel 7 and if the two crypto numbers 

50 are the same, the comparator 11 produces 
an output signal which is applied to one 
output of AND gate 13. The serial number 
read from panel 6 is checked in stage 12 for 
first appearance. If stage 12 discovers that a 

55 serial number which has just been read is 
occurring for the first time, stage 12 applies 
an output signal to AND gate 13. When the 
two inputs of AND gate 13 each receive a 
signal It produces an output signal to signify 
that the payment document is evaluated as 
genuine. 

The stage 12 stores either all the possible 
serial numbers or all the serial numbers 
read from payment documents within a 
o5 predetermined time interval before 



checking the particular documents 
concerned. Preferably, the time_ interval 
corresponds to the period of time within 
which a payment document must be 
evaluated if it is to be valid; for instance the 70 
time within which a drawn cheque must be 
cashed. The secret code can be altered after 
such a time interval. In a first mode of 
operation stage 12 evaluates the serial 
number read from panel 6 as genuine only if 7s 
that serial number does not coincide with 
any of the serial numbers in store. Every 
serial number found not to coincide with a 
serial number already in store is itself 
stored. In a second mode of operation the on 
serial number read is assessed as geniune - 
when there is coincidence between it and 
any stored serial number, and is cancelled 
in the store of the stage 12. For improved 
security, both modes can be operated in 85' 
parallel in which case both the signals 
produced can be applied to an additional 
AND gate on the second input of AND gate 

A system for checking and evaluating on 
documents as described above is of use, for 
instance, in a clearing centre where all' the 
cash sums of subscribers are entered and 
where mechanical checking of this kind to 
see whether the documents are genuine has 95 
the advantage of saving considerable time 
and providing greater security over visual 
assessment of cheque signatures by counter 
officials and in automatic cash-issuing 
machines in which, once a document has 100 
been found to be genuine, the amount 
stated thereon is paid out automatically. 

As already mentioned, the documents 
cannot be falsified because the amount and ^ 
the serial number is associated with the 105 
crypto number in a non-detectable way so 
that in the event of unauthorized tampering 
with the amount, the crypto number ceases 
to be correct and the crypto number 
associated with the altered amount cannot 1 10 
be found unless the secret code is known. 

To ensure that the stated amount is not 
paid out more than once on a copied 
document, the serial number is checked 
too. In this check a document is assessed as 115 
genuine only if the serial number read from 
it occurs for the first time. Any document 
can be evaluated only once, copies' and 
duplicates being assessed as false. 

Consequently, documents prepared by 120 
this method can be read mechanically and 
evaluated for genuineness and they cannot, 
without extreme difficulty, be counterfeited 
or duplicated. 

Further mechanically readable particulars 125 
in addition to the amount and serial number 
can be printed on a document B and made 
against falsification .. by means of the 
digitizer 1 and the crypto number. In the 
case of documents used in an automatic 130 
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payment system, such additional particulars 
can be: 

the account number to be debited with 
the amount; 

the reference number to which the 
account is to be credited; 

the date of preparing the document; and 

the number of the device in which the 
document has been prepared. 

To ensure that in the event of a 
completely prepared document being lost 
an unauthorized person cannot use it to 
draw cash from an automatic cash pay-out 
machine, information identifying the 
drawer can be entered into the enciphering 
device 1 but not printed on the document, 
the information comprising, for example, 
the credit card number of the rightful owner 
of the document, the pay-out date and time 
and the number of the pay-out automat. 
These three items of information which 
affect the preparation of the crypto number 
and which do not appear on the document 
will therefore be unknown to an 
unauthorized person. Since the cash sum 
specified is paid out only when the proper 
person has the document evaluated at the 
right place and at the right time, a 
document of this kind would be proof 
against misuse by unauthorized persons. 

Figure 3 shows apparatus for preparing a 
document B carrying the above mentioned 
information. The document B has four 
extra information panels, a panel 14 for the 
account number, a panel 15 for the 
reference number, a panel 16 for the date 
on which the document is drawn and a 
panel 17 for the number of the document- 
preparing device. The account number, 
amount, reference number, serial number, 
date of drawing and number of the drawing 
or preparing device may be applied to the 
document in mechanically readable form 
before the document is actually prepared. 
For the actual preparation, these 
particulars are read by a document reader 
18 and supplied to corresponding inputs of 
the calculator 9. To facilitate mechanical 
reading all the digits and numbers in the 
panels appear on the document in a single 
line. 

In addition to the inputs . previously 
described, calculator 9 has three other 
inputs 19 to 21, Identification information is 
introduced into input 19 by means of a 
keyboard, the pay-out date and time is 
applied to input 20 by means of an electric 
date clock and the number of the automatic 
pay-out 'machine is applied to input 21. 
From all these input data and from the 
secret code stored in store 8, calculator 9 
calculates the crypto number which is 
written by document writer 4 in document 
panel 7. 

The serial number can be coupled with 



the number of the document-preparing 
device or with the number of the evaluating 
device, so that when the documents are 
assessed only the serial numbers figuring 
amongst the numbers of these devices have 70 
to be checked. Also, the serial number of 
the documents can be associated with the 
date information so that serial numbers 
begin afresh daily and so only a reduced 
number of serial numbers have to be 75 
evaluated for first occurrence. The serial 
numbers can be associated with the account 
number or reference number. 

The stored secret code can be fixed or 
can be varied automatically, for instance, in 80 
dependence on the date. The sequence of 
serial numbers can begin afresh for each 
alteration in the secret code and for each 
alteration in the date. 

Figure 4 shows a system for the automatic 85 
paying in and paying out of cash comprising 
two automatic cash -paying-in machines E,, 
Ej, a document-preparing facility F, an 
automatic cash paying-out machine G and a 
clearing centre D to which the automatic 90 
paying in and paying out machines and the 
document-preparing facility are electrically 
connected. The paying-in machine E, and 
the facility F have document-preparing 
devices of4he kind shown in Figure 1, while 95 
the centre D and the machine G have 
document-evaluating facilities of the kind 
shown in Figure 2. It is not essential for 
there to be an electrical connection 
between the clearing centre and the various 100 
automatic machines. 

In addition to the document-preparing 
device A of Figure I the cash paying-in 
facility Ei has a document slot 21, a paying- 
.in slot 22 and a bank note tester 23, such as 105 
that disclosed in U.S. Patent Specification 
3,753,617, the data write-in stage 3 being in 
the form of a keyboard. 

The automatic cash paying in machine Ej 
operates as follows: a blank document B is 110 
placed in slot 21, the cash to be paid in is 
typed on keyboard 3 and printed by the 
document writer 4 and is supplied as an 
input to the enciphering device 1. The serial 
number is produced in the serial number 115 
producer 2, printed on the document and 
supplied to the enciphering device 1. Paid- 
in bank notes are introduced by way of 
aperture 22. The paid in cash is tested by 
tester 23 for genuineness and amount. If the 120 
amount of cash paid in corresponds at least 
to the amount typed out, the cash tester 
applies to the enciphering device 1 a signal 
which causes the crypto number produced 
to be printed on the document as a non- 125 
counterfeitable and mechanically readable 
receipt. As described with reference to 
Figure 3, the document can have an 
account number and/or reference number. 
Also, the automatic machine can prepare j30 
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the document in duplicate, one copy being 
given as a receipt to the person making the 
payment while the other copy goes to the 
clearing centre where the document is 
5 checked mechanically for genuineness in an 
evaluating device C of the kind shown in 
Figure 2 and the cash sum is entered up. 
The document would be sent to the clearing 
centre in this way in the absence of an 

10 electrical connection between the 
automatic machine and the clearing centre. 

If there is an electrical connection 
between the machine E, and the clearing 
centre D, in the form indicated in Figure 4 

15 by a chain-dotted line, the cash paid m can 
be entered up directly during the actual 
paying in. The document issued then serves 
as a receipt for the person making the 
payment. If the person making the payment 

20 has an account of his own and the account 
number is printed on the document as 
described with reference to Figure 3, any 
change due to the person making the 
payment can be credited to him in the 

25 clearing centre. Change can also be given at 
the automatic machine but in this case the 
paying-in machine Ei would have to be 
constructed appropriately. 
The paying-in machine Ej can process 

30 , documents which have been prepared with 
all the necessary particulars, i.e. amount, 
serial number and possibly account 
number, except for the crypto number 
externally of the machine. To receive these 

35 particulars and to write them into the 
enciphering device 1 the machine Ej has a 
document reader 18 which is shown in 
Figure 3. So far as the document slot 21, 
enciphering device 1, cash entry slot 22 and 

40 bank note tester 23 are concerned, machine 
Ej is identical with machine Ej, and the 
operation of the two machines is identical 
except for the introduction of the document 
data and for the absence of an indication of 

45 the amount and serial number on the 
document. The only function of the 
document writer 4 is to print the crypto 
number on the document. Of course, the 
machine Ej could have a serial number 

50 producer and produce the serial number 
itself instead of reading it from the 
document by means of the reader 18. 

The document-preparing device F serves 
to prepare documents similar to the 

55 . document shown in Figure 3 and has, in 
addition to the enciphering device 1, serial 
number producer 2, write-in keyboard 3, 
reader 4 arid slot 21 , a slot 24 for receiving a 
credit card K identifying the person making 

oO out the document and a credit card reader 
25. 

The documents prepared by means of the 
device F can be used, for instance, as order 
checks to transfer the amount stated on the 
^5 document from the account of the drawer 



(account number) to the account of the 
person receiving the money (reference 
number). The identification data derived 
from the drawer's credit card together with 
the amount and other particulars on the 70 
document, serve as the drawer's 
"signature" in the crypto number produced 
in the enciphering device 1. The completed 
order cheque is despatched to the clearing 
centre if the document-preparing facility is 75 
not electrically connected thereto. If there 
is an electrical connection between centre 
D and device F the requisite book-keeping 
operations are done "on line" in the 
clearing centre. gQ 

A document B prepared in the device F 
can be used as a cheque for drawing cash 
from an automatic cash pay-out machine G. 
In this case the device F has a "on line" 
connection with the clearing centre D so 85 
that the latter can check the state of the 
drawer's, account. In addition to the 
document-evaluating device C of Figure 2, 
the machine G has a document slot 21, a 
cash delivery slot 26 and a cash delivery 90 
facility 27. The output of the AND gate 13 
in the device of Figure 2 is connected to the 
input of the cash delivery facility 27. 

A cheque for the payment of cash 
prepared in a document-preparing device F 95 
is placed in slot 21. The reader 10 reads all 
the particulars present on the document 
and such particulars are processed in the 
enciphering device 1 and in the stage 12, as 
described with reference to Figure 2. The 100 
output signal of AND gate 13 causes 
automatic pay out of the amount on the 
document. 

As a rule, the automatic machines for 
receiving and paying out cash are in the 105 
form of armoured cabinets. 

As already stated, the clearing centre D 
has an evaluating device of the kind shown 
in Figure 2 and can also have all the 
facilities found in a conventional dp-to-date 110 
clearing centre. For instance, the credit 
card numbers and account numbers of 
every client can be stored at the clearing 
centre. If the centre has an on-line 
connection with all the other facilities, i.e., 115 
with the document-preparing facilities and 
with the automatic machines for each 
paying in and paying out cash, the serial 
number producer and the stage which 
checks and stores serial numbers and the 120 
enciphering device for all the facilities'can 
all be located at the clearing centre so that 
the automatic machines for paying in and 
paying out cash can be of very simple 
construction. |25 

In this situation the crypto number can be 
used as a testing number to secure payment 
so that any digit in the amount or serial 
number or crypto number that has been 
incorrectly printed, or transmitted or read is 130 
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immediately detected as incorrect in the 
evaluation. 



WHAT WE CLAIM IS:— 

L An apparatus for preparing and 
5 assessing documents, comprising: 

at least one document-preparing 
apparatus including first means for 
positioning a payment document, 

means for writing on the positioned 
10 document, 

means for producing a serial number, 

first means for enciphering, 

first means for introducing an amount 
and the serial number into the means for 
15 enciphering; 

the first enciphering means coniprising an 
electronic code calculator and a first secret 
code store and producing a crypto number 
from secret code information from the 
20 store, the serial number and the amount, 

the output from the first enciphering 
means and the first means for introducing 
the amount and the means for producing 
the serial number controlling the means for 
25 writing in order to write the amount, the 
serial number and the crypto number on the 
positioned document; and further 
comprising: 

at least one document-assessing 
30 apparatus including second means for 
positioning a payment document, 

means for reading from the positioned 
document the amount, the serial number 
and the crypto number, 
35 a second enciphering means comprising 
an electronic code calculator and a second 
secret code store storing the same secret 
code information as that stored in the first 
store for producing a crypto number from 
the secret code information stored in the 
second store, and the amount and the serial 
number read by said reading means, 

rheans for comparing the crypto number 
produced by said second enciphering means 
and the crypto number read by said reading 
means, and means responsive to said 
comparing means to indicate the 
genuineness of the document. 

2. Apparatus as claimed in claim 1 
50 wherein the document-preparing apparatus 
includes means for introducing information 
identifying the person preparing the 
document into said first enciphering means 
to modify the crypto number. 
55 3T"^pparatus as claimed in claim I, 
wherein " the means for producing a serial 
number comprises an electronic counter. 



4. Apparatus as claimed in claim 1, 
including a device for testing and storing 
each serial number that has been read and 60 
which is not already present in the store, 
and an AND gate having one of its two 
inputs connected to the store and the other 
input to the comparing means, the AND 
gate producing on output signal when a 65 
serial number just read and the serial 
numbers previously stored do not coincide 
and the crypto number is compared by the 
comparing means do coincide. 

5. Apparatus as claimed in claim 1, 70 
wherein the document-preparing apparatus 

is part of an automatic-pay in device having 
an opening to receive documents in the 
form of bank notes and means for checking 
the amount and genuineness thereof with a 75 
bank note testing device being connected to 
the first enciphering means to control the 
transfer of the crypto number to the writing 
means only if the amount of the bank. notes 
introduced into the device is at least as 80 
great as the amount which is introduced 
into the means for writing in the document- 
preparing apparatus. 

6. Apparatus as claimed in claim 1 
wherein the document-assessing apparatus 85 
is part of an automatic paying-out machine 
which includes apertures for the delivery of 
money and a money paying-out facility, said 
paying-out facility being connected to said 
comparing means and being operated 90 
whenever said indicating means responds to 
said comparing means indicating the 
genuineness of the document. 

7. Apparatus as claimed in claim 1 
wherein in addition to the amount and serial 95 
number, said first means for introducing 
serves to introduce further data comprising 

the date of preparation and the number of 
the preparing apparatus into said first 
enciphering means whereby the crypto 100 
number is modified by said further data. 

8. Apparatus as claimed in claim 7 
wherein said writing means applies said 
additional data to the document in 
mechanically readable form. 105 

9. Apparatus for preparing and assessing 
documents substantially as described in and 
by the accompanying drawings. 

TREGEAR, THIEMANN & BLEACH, 
Chartered Patent Agents, 

Enterprise House, 
Isambard Brunei Road, 
Portsmouth POl 2AN. 

— and — 
49/51 Bedford Row, 
London WCIV 6RL. 
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